deploy-templates/templates/authorizpolicy-esa.yaml

kind: AuthorizationPolicy
apiVersion: security.istio.io/v1beta1
metadata:
  name: authoriz-policy-{{ .Chart.Name }}
  namespace: {{ .Release.Namespace }}
spec:
  selector:
    matchLabels:
      {{- include "ddm-notification-service.selectorLabels" . | nindent 6 }}
  rules:
    - from:
        - source:
            notRequestPrincipals:
              - '*'
      to:
        - operation:
            notPaths:
              - /actuator*
              - /openapi
              - /swagger-ui/*
              - /v3*
  action: DENY